The Cyber Security Modeling Language: A Tool for Assessing the Vulnerability of Enterprise System Architectures
2013 (English)In: IEEE Systems Journal, ISSN 1932-8184, Vol. 7, no 3, 363-373 p.Article in journal (Refereed) Published
The cyber security modeling language (CySeMoL) is a modeling language for enterprise-level system architectures coupled to a probabilistic inference engine. If the computer systems of an enterprise are modeled with CySeMoL, this inference engine can assess the probability that attacks on the systems will succeed. The theory used for the attack-probability calculations in CySeMoL is a compilation of research results on a number of security domains and covers a range of attacks and countermeasures. The theory has previously been validated on a component level. In this paper, the theory is also validated on a system level. A test indicates that the reasonableness and correctness of CySeMoL assessments compare with the reasonableness and correctness of the assessments of a security professional. CySeMoL's utility has been tested in case studies.
Place, publisher, year, edition, pages
IEEE Press, 2013. Vol. 7, no 3, 363-373 p.
Computer security, expert systems, risk analysis, supervisory control and data acquisition (SCADA) systems
IdentifiersURN: urn:nbn:se:kth:diva-103689DOI: 10.1109/JSYST.2012.2221853ISI: 000321641800003ScopusID: 2-s2.0-84880572592OAI: oai:DiVA.org:kth-103689DiVA: diva2:561243
QC 201303202013-03-202012-10-172013-08-15Bibliographically approved